defguard
  • Introduction
  • User documentation (help)
    • Configuring VPN
      • Defguard Desktop Client
        • Update instance
      • Other WireGuard® Clients
        • Configuring a device for new VPN Location manually
    • Password change / Reset
    • Enrollment & Onboarding
      • With internal Defguard SSO
      • With external SSO (Google/Microsoft/Custom)
    • Setting up 2FA/MFA
    • Desktop Client
    • CLI Client
  • Admin & features
    • Deploying your instance
      • One-line install script
      • Standalone package based installation
      • Docker images and tags
      • Docker Compose
      • Kubernetes
      • Upgrading
      • Gateway
        • Running gateway on MikroTik routers
      • Securing gRPC communication
      • OpenID RSA key
      • Configuration
      • Pre-production and development releases
      • High Availability and Failover
      • Health check
    • Features & configuration
      • Zero-Trust VPN with 2FA/MFA
        • Create/manage VPN Location
        • Network overview
        • Executing custom gateway commands
        • Multi-Factor Authentication (MFA/2FA)
          • MFA Architecture
        • Remote desktop client configuration
        • DNS and domains
      • Remote user enrollment
        • User onboarding after enrollment
      • SSO (OpenID Connect)
        • Portainer
        • Grafana setup
        • Proxmox
        • Matrix / Synapse
        • Django
        • MinIO
        • Vault
      • SMTP for email notifications
      • YubiKey Provisioning
      • Webhooks
      • Forward auth
      • SSH Authentication
      • Network devices
      • Gateway notifications
      • New version notifications
  • Troubleshooting Guide
    • Sending support information
    • Client Windows installer exit codes
    • Client "All traffic" connection issues
    • WebAuthn security keys
  • Enterprise Features
    • License
    • Enteprise features
      • Automatic (real time) desktop client configuration & sync
      • External OpenID providers
        • Google
        • Microsoft
        • Zitadel
        • Keycloak
        • JumpCloud
        • Okta
        • Custom
      • External OIDC secure enrollment
      • VPN & Client behavior customization
      • REST API
      • Access Control List
        • ACL Aliases
      • LDAP and Active Directory integration
        • Configuration
        • Settings table
        • Two-way LDAP and Active Directory synchronization
  • Tutorials
    • Step by step setting up a VPN server
      • Adding additional VPN locations
  • In depth
    • Roadmap
    • Architecture
      • How do VPN statistics work
      • Security concepts
  • For Developers
    • Contributing
    • Environment setup
    • Translations (core/web)
      • Switching language
      • Adding translations
  • Translations (client)
    • Adding translations
  • Contact us
    • Community & Support
Powered by GitBook
On this page
  • Enterprise is free up to certain limits
  • Purchasing the license
  • Configuring defguard with obtained license

Was this helpful?

Edit on GitHub
  1. Enterprise Features

License

PreviousWebAuthn security keysNextEnteprise features

Last updated 2 months ago

Was this helpful?

Defguard Enterprise offers a lot of functionalities that are not offered in the Open Source Open Core, like external OpenID Connect/SSO support, automatic&real time desktop client synchronization and configuration, and much more (go to to see more).

Enterprise is free up to certain limits

From release 1.1.0 all enterprise features up to the following limits are free and no license is required:

  • 5 active users

  • 10 devices

  • 1 location

Those limits should be more then enough for small businesses, home-labs or just to test out Enterprise features before committing.

At the moment your instance exceeds any of the limits, you will receive a relevant notification in the interface. Defguard will remain fully operational, and all Open Source functionalities will be available. Only the enterprise functionalities will be disabled until you activate the license.

Purchasing the license

If you would like to purchase a license, we offer two types of licenses:

  1. Subscription that can be bought on

  2. Offline (which will not contact our license server) with a defined custom period can be bought directly, please contact: sales @ defguard.net

Subscription

You can buy a monthly (soon yearly) subscription on our website: .

After purchasing:

  1. The license will be emailed to you on the email defined in the purchase form. Also there will be a second email with the invoice.

  2. Each month (on the date the license expires) defguard core will contact our licensing server and if the monthly payment was successful, our licensing server will automatically issue a new license and the enterprise plan will be extended to new date.

Offline license

Defguard is build with the highest security architecture in mind, thus there may be scenarios where you don't want any of the components to contact external services (eg. defguard core will have no access to Internet).

Offline license can be also issued for any period of time, so another scenario is that you can buy the enterprise license for any duration you wish.

To obtain an offline Enterprise License please contact our sales at: sales [ a t ] defguard.net and provide:

  • the period for which you would like to obtain the license

  • your company data and contact email address (for billing and license sharing)

  • preferred payment method: bank wire transfer or card payment link

Configuring defguard with obtained license

To configure defguard with the received license, please go to Settings -> enter the license in the Enterprise License configuration window -> Click Save.

The license will be validated and detailed information about the license will be diplayed (validity period and the license type):

If your setup / firewall / network policy doesn't allow that defguard will contact our licensing server, please contact us for the .

All Enterprise Features
https://defguard.net/pricing/
https://defguard.net/pricing/
Offline license
defguard enterprise license settings